Hardware Requirements - IPsec VPN

[cristianlarocca]

Hello guys! I’m lookin (with no success) for some performance test of VyOS running as VPN Hub. I need to deploy the hub with VyOS, DMVPN or GREoIPsec, but I don’t know what hardware I should use.

I need 180 spokes and no more than 100Mbps.

I’ve this server, it’s powerfull, but I can’t find documentation about this:

1 Intel® Xeon® Processor E3-1220 v5 (4 Cores 8M Cache, 3.00 GHz)
Chipset Serverboard Chipset C226
Network Controller Dual Intel® Gigabit Ethernet
Storage Controller Intel® RAID Controller RS3WC080
Memory 16GB DDR4 ECC
1 HARD DISK 300GB SAS 10K 2.5" 64MB

2 questions:

1. It’s enough?
2. Is there any documentation or some performances test or some experience with this?

Thanks in advance!
Cristian.

[Unicron]

Do you have any idea about the traffic? that will cost cpu … rest of the hardware should be no issue.
I have no idea though how the cpu load will be with what amount of tunnels/traffic. You cpu has aes-ni (AES instruction set - Wikipedia)
but i do not know if we utilize it in VyOS 1.2 already… should be build in kernel though.

[cristianlarocca]

@Unicron

Do you have any idea about the traffic? that will cost cpu … rest of the hardware should be no issue.
I have no idea though how the cpu load will be with what amount of tunnels/traffic. You cpu has aes-ni (AES instruction set - Wikipedia)
but i do not know if we utilize it in VyOS 1.2 already… should be build in kernel though.

Hi! Thanks for the reply.

I need no more than 100Mbps (IPsec traffic). It’s not a big deal…

About to que amount of tunnels, I think that would be matter of RAM and CPU, but I don’t know how to estimate how much RAM I need.